6 months ago
Remote, United StatesSenior
Responsibilities
- Own the integration, configuration, and output quality of security tooling.
- Tune outputs to maximize signal and minimize noise.
- Design rules, severity scoring, and triage flows for actionable findings.
- Build the security judgment layer for context-aware prioritization.
- Partner with engineers on UI presentation and remediation flows.
- Work with PM and design on roadmap priorities.
- Review and shape architectural choices affecting security outcomes.
- Engage with customers to understand platform usage and adoption barriers.
- Benchmark output quality against competitors.
- Contribute to open source security tooling.
Requirements
- 5+ years of application security experience with a focus on shipping security products.
- Strong programming skills in Go, Python, or TypeScript.
- Hands-on experience tuning security tooling for production use.
- Understanding of vulnerability research and exploit reasoning.
- Ability to distinguish actionable security findings from technical truths.
- Excellent communication skills and customer engagement experience.
- Pragmatic approach to building solutions quickly.
- Experience in a fast-moving startup environment.
- Bonus: Prior experience shipping a security product.
- Bonus: Contributions to open source security tooling.
- Bonus: Offensive security background or relevant certifications.
- Bonus: Experience with LLM agents or autonomous AI systems.
Benefits
- Comprehensive health & wellness benefits.
- 20 days PTO per year, plus 8 floating holidays.
- Remote work culture.
- Team off-sites in stunning locations.
- Competitive compensation & equity.
Tech Stack
Categories
About Oneleet
Oneleet builds a cybersecurity and compliance platform for growing companies, combining SaaS tools with expert services. Teams use it to run security programs, automate SOC 2/ISO 27001/HIPAA/GDPR evidence, scan code, discover attack surface, manage device agents, host a trust center, and schedule penetration tests or vCISO support. Founded in 2022 and headquartered in Wilmington, Delaware, the company is privately held.